Hacker Newsnew | past | comments | ask | show | jobs | submit | vk6flab's commentslogin

Unfortunately that's not quite true, since the "app screen" on the media display during Android Auto use has an additional "Toyota" icon that AFAIK isn't coming from my phone.

What's more concerning is that it's entirely unclear exactly what information is shared over the Android Auto link, in my case, over Bluetooth.


There's a protobuf-based API for two-way communication between the Android Auto app and the head unit [0]. It depends on what the headunit supports, but this includes data such as GPS location, steering wheel button activation, accelerometer data, parking brake activation, gear selection, touch screen input, dimmer switch position, odometer, and much more.

A lot of this has obvious use within the AA interface; for example, the parking brake position is used to prevent scrolling too far through lists, and the car's GPS is usually much more accurate than the phone's and better on the phone battery.

0: https://github.com/f1xpl/aasdk/tree/development/aasdk_proto (pretty old reverse-engineering effort)


One of the things I notice CarPlay has access to is the fan speed. In one of my vehicles, when I say “hey siri” it turns the HVAC fan down so it can hear me better. I’ve always wondered if the interface is the phone telling the car “hey make things quieter” or if it’s explicitly turning the fan down. It’s also interesting that this only happens in one of my cars. I assume it’s because the other car is a higher end vehicle and has a quieter fan.


In GM cars (as observed in my last few), the logic is in the head unit: "mic on -> hvac lower", while "hotword detect" uses a different "mic on" method that does not

EDIT, previously "does not" above said "doe snot", which explains the reply below


I'm sure it's not great, but deer mucus is a bit of an extreme description.


I never learned to properly touch type, i have my own method, somehow, which uses two fingers of the left hand and three of the right. Spacebar being pressed too soon or too late is, sadly, common :(


Proper touch typing doesn't fix that issue.


I appreciate this comment, FWIW.


That icon is a "close Carplay/Auto" button. My Subaru has a Subaru button; my wife's Mazda has a Mazda button.


The headers actually contain an unsubscribe email address that actually works.

The format is something like googlegroups-manage+{groupName}+unsubscribe@googlegroups.com

Just send an email there and they stop coming (for that list).

Source: I was getting spam like this, a fellow victim did some tests and confirmed that it stopped the onslaught of messages.


I just block the group address on the MTA, but it doesn't matter. In all instances so far when it came to my attention the group was already deleted. Next time they will use a different group and I don't want to blanket ban all Google Group mail for my users.

It's not even that much of a hassle. What worries me is that I don't understand why someone would go through the trouble of doing this for no apparent benefit. I hope I'm not somehow unknowingly enabling some sort of an attack on any of the entities sending these automated replies.


The aircraft was doing touch and go's, it was planning to land and immediately take off again, something you typically do to practise procedures.

Speculation is that the pilot forgot to lower the landing gear, but I suspect the NTSB will likely determine the specific circumstances.

The radio traffic is here on the VASAviation YouTube channel:

https://youtu.be/zCTicb6of2w


My uncle did a gear-up landing that way a number of years ago. He was fine, but the plane was a total loss from a financial perspective. It was a Moonie, and the prop hit the ground, which forced an engine rebuild as I understand it.

Scary, but as they say any landing you walk away from...



I assure you it was an airplane and not a cultist.


The article says it was a mechanical issue that forced the gear up landing?


Doubtful, if so they would have warned ATC.


In Australia the ACS (Australian Computer Society), "the professional association and largest community for Australia's technology professionals" is telling the world that the median hourly rate of $57.08 is too high and that professionals should expect "rebalancing" after the pandemic.

For context, inflation adjusted, in 1998 (25 years ago!) when I was a generic IT help-desk operator at a local University I was earning that rate. So, apparently in ICT we're earning too much and we should be happy about it.

Source: https://ia.acs.org.au/article/2023/it-teams--salaries--rebal...


  Location: Perth, Western Australia (UTC+8)
  Remote: Yes
  Willing to relocate: No
  Technologies: AWS Docker MySQL Linux JavaScript node.js HTML CSS GraphViz R Tableau PHP Python bash git VMware VNC and many, many more...
  Résumé/CV: https://www.itmaze.com.au/resume
  Email: onno@itmaze.com.au
I have been analysing data in one way or another pretty much my entire career. Much of the time that takes the form of writing custom code to extract data, then to clean it, then to store it, then to analyse it.

I am a polyglot ICT professional and my resume is formatted as a list of work experience. As an example, for a recent large project I was contracted to analyse a large obfuscated codebase in active development.

The brief: Analyse a JavaScript library which may be subject to legal action.

As the sole developer and data analyst under contract, I determined that the library consisted of about 300k lines of obfuscated code that was in wide use and under active development. After I attempted initial static analysis, I built a tool to capture the library and log its activity whilst it was running (ie. during run-time). The library under investigation actively monitored user activity and resisted simple screen-shot attempts. The capture and logging tool I developed simulated user interaction, scrolled pages, clicked on links and logged all activity including dynamic DOM changes made by the library. The tool also captured Chrome HAR files. I used the source-code for Chrome to discover and address several messaging and logging edge-cases.

The capture and logging tool I wrote in Node.js, used Chrome and puppeteer, and was implemented on AWS EC2 using Docker images I built from scratch, published to, and pulled from AWS ECR. Logs were stored on AWS S3. I deployed the tool across random AWS regions using AWS CloudFormation and bash.

For initial analysis, I generated Graphviz maps using Python with thousands of nodes and edges showing the URL calls being used and their relationships. I conducted in-depth analysis of over a TB of logging data with customised de-obfuscation tools that I built to use abstract syntax tree filters to generate names using four letter English words to enable the tracking of function and variable names. I mapped function calls, reverse engineered and mapped (mostly undocumented) Chrome HAR files. I also traced variable values across the codebase, dynamically inserting debugging statements during run-time.

Customised versions of the library were also injected at run-time to discover further interactions of the codebase with other "cooperating" libraries. I also mapped the evolution of the library codebase itself using git, by creating commits for each discovered and de-obfuscated version. I used PHP to download historic versions of the codebase from archive.org. I traced and documented small and large changes.

I documented the entire project, under the expectation of showing evidence in court.

Technologies: Node.js, Puppeteer, Chrome, Docker, bash, Ubuntu, AWS CloudFormation, AWS EC2, AWS ECR, AWS S3, Graphviz, Python, PHP, grep, sed, awk, git, json, yaml, abstract syntax trees


  Location: Perth, Western Australia (UTC+8)
  Remote: Yes
  Willing to relocate: No
  Technologies: AWS Docker MySQL Linux JavaScript node.js HTML CSS GraphViz R Tableau PHP Python bash git VMware VNC and many, many more...
  Résumé/CV: https://www.itmaze.com.au/resume
  Email: onno@itmaze.com.au
I have been analysing data in one way or another pretty much my entire career. Much of the time that takes the form of writing custom code to extract data, then to clean it, then to store it, then to analyse it.

I am a polyglot ICT professional and my resume is formatted as a list of work experience. As an example, for a recent large project I was contracted to analyse a large obfuscated codebase in active development.

The brief: Analyse a JavaScript library which may be subject to legal action.

As the sole developer and data analyst under contract, I determined that the library consisted of about 300k lines of obfuscated code that was in wide use and under active development. After I attempted initial static analysis, I built a tool to capture the library and log its activity whilst it was running (ie. during run-time). The library under investigation actively monitored user activity and resisted simple screen-shot attempts. The capture and logging tool I developed simulated user interaction, scrolled pages, clicked on links and logged all activity including dynamic DOM changes made by the library. The tool also captured Chrome HAR files. I used the source-code for Chrome to discover and address several messaging and logging edge-cases.

The capture and logging tool I wrote in Node.js, used Chrome and puppeteer, and was implemented on AWS EC2 using Docker images I built from scratch, published to, and pulled from AWS ECR. Logs were stored on AWS S3. I deployed the tool across random AWS regions using AWS CloudFormation and bash.

For initial analysis, I generated Graphviz maps using Python with thousands of nodes and edges showing the URL calls being used and their relationships. I conducted in-depth analysis of over a TB of logging data with customised de-obfuscation tools that I built to use abstract syntax tree filters to generate names using four letter English words to enable the tracking of function and variable names. I mapped function calls, reverse engineered and mapped (mostly undocumented) Chrome HAR files. I also traced variable values across the codebase, dynamically inserting debugging statements during run-time.

Customised versions of the library were also injected at run-time to discover further interactions of the codebase with other "cooperating" libraries. I also mapped the evolution of the library codebase itself using git, by creating commits for each discovered and de-obfuscated version. I used PHP to download historic versions of the codebase from archive.org. I traced and documented small and large changes.

I documented the entire project, under the expectation of showing evidence in court.

Technologies: Node.js, Puppeteer, Chrome, Docker, bash, Ubuntu, AWS CloudFormation, AWS EC2, AWS ECR, AWS S3, Graphviz, Python, PHP, grep, sed, awk, git, json, yaml, abstract syntax trees


I looked at Brave a little while ago. It was actively attempting to install things and force me to comply to their world view, with too many options and buttons to make the user experience in any way palatable. In the end, even opening multiple tabs and navigating between them became too hard and I removed it after it started to demand that I install a VPN, even though I browse from within my own secure network.


Thanks, I'll have a look, but I'm not sure how it goes with privacy tracking and all the other great features that I pretty much take for granted with "Focus".


Even regular FF for Android has a lot of privacy and tracking prevention features. I highly recommend trying it out. Also install uBlock Origin.


SEEKING WORK | UTC+8 | Remote

Hi I'm Onno,

I'm an experienced polyglot IT professional, software developer, trouble shooter, researcher, public speaker, educator, writer and publisher, founder and small business owner, podcaster, and licensed radio amateur. I work remotely from my home-office in Perth, Western Australia, UTC+8.

If you're into resolving odd and complex problems, need someone with dedication and tenacity, and believe that "Social Good" is an important attribute to cultivate, get in touch!

  Location: Perth, Western Australia (UTC+8)
  Remote: Yes
  Willing to relocate: No
  Résumé/CV: https://www.itmaze.com.au/resume
  LinkedIn: https://www.linkedin.com/in/onnobenschop/
  Email: onno@itmaze.com.au


SEEKING WORK | UTC+8 | Remote

Hi I'm Onno,

I'm an experienced polyglot IT professional, software developer, trouble shooter, researcher, public speaker, educator, writer and publisher, founder and small business owner, podcaster, and licensed radio amateur. I work remotely from my home-office in Perth, Western Australia, UTC+8.

If you're into resolving odd and complex problems, need someone with dedication and tenacity, and believe that "Social Good" is an important attribute to cultivate, get in touch!

  Location: Perth, Western Australia (UTC+8)
  Remote: Yes
  Willing to relocate: No
  Résumé/CV: https://www.itmaze.com.au/resume
  LinkedIn: https://www.linkedin.com/in/onnobenschop/
  Email: onno@itmaze.com.au


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: